Linux Distros Unpatched Vulnerability : CVE-2026-17905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-17659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypa...

Linux Distros Unpatched Vulnerability : CVE-2026-17932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from...

Linux Distros Unpatched Vulnerability : CVE-2026-17722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...

Linux Distros Unpatched Vulnerability : CVE-2026-17985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-17829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2026-64330

A flaw was found in the Linux kernel's USB Type-C subsystem tcpm. A malicious USB-C partner device could exploit an out-of-bounds read vulnerability in the svdmconsumemodes function. By manipulating the SVID Standard or Vendor ID index, the partner device can force the system to register an...

Security update for python-dulwich

This update for python-dulwich fixes the following issue CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3408-1 Security update for python-dulwich

This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525...

BELL-CVE-2026-64539

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-62435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant...

Linux Distros Unpatched Vulnerability : CVE-2026-42493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly...

Linux Distros Unpatched Vulnerability : CVE-2026-54603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect...

Open Security Benchmark: Towards Autonomous Enterprise Cyber Defense

Enterprises are moving toward autonomous cyber defense: agentic AI that builds situational awareness of an organization's security state and reasons from it to assessments, decisions, and actions. This rests on a holistic view of the enterprise's security state, the continuous, cross-vendor pictu...

Linux Distros Unpatched Vulnerability : CVE-2026-64560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Prevent UAF caused by non-leader exec race Wongi and Jungwoo decoded and reported a non-leader exec related race which can result in an UAF:...

Linux Distros Unpatched Vulnerability : CVE-2026-62432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EVTCHNOPexpandarray hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOPreset,...

Linux Distros Unpatched Vulnerability : CVE-2026-62433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a...

Linux Distros Unpatched Vulnerability : CVE-2026-58180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Traffic Server txnbox plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9,...

Linux Distros Unpatched Vulnerability : CVE-2026-59986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - librabbitmq - None Ubuntu Linux - Unknown description CVE-2026-59986 Note that Nessus relies on the presence of the package as reported by the...

GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)

Summary The Diameter AVP decoder in github.com/gopacket/gopacket computes dataLength := avp.Length - uint32headerSize without first ensuring avp.Length = headerSize. When the Vendor flag is set, headerSize is 12, but the only length guard upstream rejects avp.Length CWE-770 unbounded allocation...